AKS service Graph queries missing "Resources | "

Type of Content Suggestion

Add a recommendation

Description of Suggestion

There appear to be 43 graph queries that start with "graph": "where type=

would be great if all the queries were the full querry graph query  "graph": "Resources | xxx

EXAMPLE
{
"category": "Network Topology and Connectivity",
"subcategory": "Security",
"text": "If required add company HTTP Proxy",
"waf": "Security",
"service": "AKS",
"guid": "6c46b91a-1107-4485-ad66-3183e2a8c266",
"id": "06.07.09",
"security": 2,
"cost": -2,
"severity": "Low",
"graph": "Resources | where type=~'microsoft.containerservice/managedclusters' | project resourceGroup,name,pools=properties.agentPoolProfiles | mv-expand pools | project subnetId=tostring(pools.vnetSubnetID) | where isnotempty(subnetId) | join (Resources | where type=='microsoft.network/virtualnetworks' | project id,resourceGroup,name,enableDdosProtection=tostring(properties.enableDdosProtection),subnets=properties.subnets | mv-expand subnets | project id,resourceGroup,name,enableDdosProtection,subnetId=tostring(subnets.id)) on subnetId | distinct id,resourceGroup,name,enableDdosProtection | extend compliant = (enableDdosProtection == 'true')",
"link": "https://learn.microsoft.com/azure/aks/http-proxy"
},
{
"category": "Operations",
"subcategory": "Compliance",
"text": "Use custom Node RG (aka 'Infra RG') name",
"waf": "Operations",
"service": "AKS",
"guid": "73b32a5a-67f7-4a9e-b5b3-1f38c3f39812",
"id": "07.02.11",
"simple": 1,
"severity": "Low",
"graph": "where type=='microsoft.containerservice/managedclusters' | extend compliant = (properties.nodeResourceGroup !startswith 'MC_') | distinct id,compliant",
"link": "https://learn.microsoft.com/azure/aks/cluster-configuration"
},

Context and Rationale

No response

References or Examples

No response

Search the AKS checklist entries for the 43 graph queries beginning with "where type=" and compare them with the full query example in this issue. Update the affected query strings so they include the required "Resources | " prefix, then verify all 43 entries retain valid query text and match the intended AKS checks.